od.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8bd40899080691914837d96d01fd285d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bd40899080691914837d96d01fd285d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8bd40899080691914837d96d01fd285d_JaffaCakes118
-
Size
56KB
-
MD5
8bd40899080691914837d96d01fd285d
-
SHA1
3916195246c1163dbc40d5a299ee15b1c1728774
-
SHA256
66e45bdb54615cbe2f6c4b10eaedfd25523ce4f863294cb9d1dfff0e00a2dec2
-
SHA512
d1b15b461d2e95af1360c528f532c09b3203f5f8bf410c6efad5f5d4b813a016b4b286c234a805f57e7502429c9fdc94df623fd18ed8cfbf0f92d6f0225468b2
-
SSDEEP
1536:+2RF/K0JPeNsXf3SDffBbutWGYVTcM/Raky:+2nPJPp3SDffByw3/Rax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bd40899080691914837d96d01fd285d_JaffaCakes118
Files
-
8bd40899080691914837d96d01fd285d_JaffaCakes118.dll windows:4 windows x86 arch:x86
95f44b6a1f284e846c47d1648f742161
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
Beep
HeapAlloc
GetProcessHeap
HeapFree
SetFilePointerEx
SetLastError
ExitProcess
rpcrt4
RpcEpUnregister
RpcEpRegisterW
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcBindingVectorFree
crypt32
CryptProtectData
Exports
Exports
mtqajjk
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 986B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ